slack-bot-builder
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is an educational resource and template library for Slack bot development. It does not contain malicious code, hidden instructions, or obfuscated payloads.
- [PROMPT_INJECTION]: No evidence of prompt injection, jailbreak attempts, or instructions designed to bypass agent safety filters was found. The instructions are focused on standard API usage and application architecture.
- [CREDENTIALS_UNSAFE]: The skill includes defensive coding examples and explicit warnings against hardcoding Slack tokens (xoxb, xoxp, xapp) and signing secrets. It correctly recommends using environment variables and encrypting sensitive data at rest.
- [EXTERNAL_DOWNLOADS]: The skill references legitimate, well-known Slack domains (slack.com) and documentation tools (block-kit-builder). No suspicious external downloads or untrusted repository references were found.
- [REMOTE_CODE_EXECUTION]: The provided Python code snippets use standard libraries (slack_bolt, slack_sdk, flask) for their intended purposes. There are no patterns involving the execution of remote scripts or unverified binary downloads.
- [DATA_EXFILTRATION]: The skill does not access sensitive local files (like SSH keys or AWS credentials) or perform unauthorized network requests. All network activity is directed toward official Slack API endpoints as part of the bot's standard functionality.
Audit Metadata